2021-04-17 Fred Gleason <fredg@paravelsystems.com>

* Escaped all SQL identifiers in 'lib/'.
	* Replaced " with ' delimiters in all SQL literal strings in 'lib/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-17 19:47:05 -04:00
parent 1b7dd5cd7d
commit 0fd02861f9
104 changed files with 4807 additions and 5120 deletions

View File

@@ -67,15 +67,15 @@ bool RDReport::ExportNprSoundEx(const QString &filename,const QDate &startdate,
// Roll Up Records
//
sql=QString("select ")+
"EVENT_DATETIME,"+ // 00
"LENGTH,"+ // 01
"TITLE,"+ // 02
"ARTIST,"+ // 03
"ALBUM,"+ // 04
"LABEL "+ // 05
"from ELR_LINES where "+
"SERVICE_NAME=\""+RDEscapeString(mixtable)+"\" "+
"order by EVENT_DATETIME";
"`EVENT_DATETIME`,"+ // 00
"`LENGTH`,"+ // 01
"`TITLE`,"+ // 02
"`ARTIST`,"+ // 03
"`ALBUM`,"+ // 04
"`LABEL` "+ // 05
"from `ELR_LINES` where "+
"`SERVICE_NAME`='"+RDEscapeString(mixtable)+"' "+
"order by `EVENT_DATETIME`";
q=new RDSqlQuery(sql);
while(q->next()) {
*strm << q->value(0).toDateTime().toString("MM/dd/yyyy hh:mm:ss")+"\t";